last executing test programs: 3m15.356967388s ago: executing program 3 (id=335): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000100000400"/78], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) shutdown(r4, 0x1) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r8, @ANYBLOB="05002f0000001a9b428edacb7e61f2000000"], 0x2c}}, 0x18) 3m14.418447873s ago: executing program 3 (id=340): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0400000220376a412f853e13f49133025743c25198841dd7e6e277edc8b622235ba9b1fe074fc0afef4c9c2a5f277759281a47dd562fecb80e59e2a71dfad76f96a5ed7572c2e98dadddacb90e542b12837be0ef4f6b7e3ef462c4300d6368ac1cf07bcbb86271ba0de3a61ed758ff6bcbded2bb2fe04cf7576f03694c12145124216bad529f5b888bc406262c"], 0x0, 0x26}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=""/204, &(0x7f0000000100)=0xcc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x0, 0x8000002, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x3}}}, 0x88) syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x20b, 0x8000000000002}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x5, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x8000000a, 0x2}, 0x0, 0x0) 3m13.45070518s ago: executing program 3 (id=345): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl(0xffffffffffffffff, 0x8b22, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) close(0x3) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x6, 0x2, [0x1, 0x7c61]}, &(0x7f00000000c0)=0xc) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x0) 3m13.415112272s ago: executing program 2 (id=348): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000100000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000767c4a5830d3a2f700000000006ad99282c895e75eec"], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(r5, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) shutdown(r5, 0x1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32, @ANYBLOB="05002f0000001a9b428edacb7e61f2000000"], 0x2c}}, 0x18) 3m12.557320194s ago: executing program 3 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r0, &(0x7f0000000580)=""/174, 0xae) 3m12.521901967s ago: executing program 2 (id=353): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setregid(0x0, 0xee01) sendmmsg(r4, &(0x7f0000008fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000009100)=ANY=[], 0x2428}}], 0x1, 0x1) recvfrom$packet(0xffffffffffffffff, &(0x7f00000001c0)=""/180, 0xb4, 0x40000140, &(0x7f0000000280)={0x11, 0x428d6df8113126e2, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) 3m12.502048667s ago: executing program 3 (id=355): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0400000220376a412f853e13f49133025743c25198841dd7e6e277edc8b622235ba9b1fe074fc0afef4c9c2a5f277759281a47dd562fecb80e59e2a71dfad76f96a5ed7572c2e98dadddacb90e542b12837be0ef4f6b7e3ef462c4300d6368ac1cf07bcbb86271ba0de3a61ed758ff6bcbded2bb2fe04cf7576f03694c12145124216bad529f5b888bc406262c"], 0x0, 0x26}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=""/204, &(0x7f0000000100)=0xcc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x0, 0x8000002, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x3}}}, 0x88) syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x20b, 0x8000000000002}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x5, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x8000000a, 0x2}, 0x0, 0x0) 3m11.630433489s ago: executing program 2 (id=357): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000100000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000767c4a5830d3a2f700000000006ad99282c895e75eec"], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r6, @ANYBLOB="05002f0000001a9b428edacb7e61f2000000"], 0x2c}}, 0x18) 3m11.619099249s ago: executing program 3 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, 0x0, 0x280) 3m10.736091551s ago: executing program 2 (id=361): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) 3m10.673895374s ago: executing program 2 (id=362): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl(0xffffffffffffffff, 0x8b22, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) close(0x3) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x6, 0x2, [0x1, 0x7c61]}, &(0x7f00000000c0)=0xc) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x0) 3m9.630550256s ago: executing program 2 (id=366): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x1ff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x1000a) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0xffff) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/174, 0xae) 2m56.579754813s ago: executing program 32 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, 0x0, 0x280) 2m54.367394033s ago: executing program 33 (id=366): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x1ff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x1000a) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0xffff) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/174, 0xae) 2m12.764651388s ago: executing program 5 (id=619): setuid(0xee00) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000680)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x5b2, 0x4, 0xf}}) 2m12.655580684s ago: executing program 5 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2m11.644026084s ago: executing program 5 (id=629): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) 2m10.67838928s ago: executing program 5 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x273) 2m10.653789742s ago: executing program 5 (id=638): r0 = socket(0x10, 0x80002, 0x0) sendmmsg(r0, 0x0, 0x0, 0x8000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x3f}}], 0x1, 0xc0) 2m10.163820361s ago: executing program 5 (id=640): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@remote, 0xffff}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@local, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0x2}, {0x0, 0x3, 0xfffffffc}, 0x0, 0x4000, 0x2}}, 0xf0}}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) 2m10.102951925s ago: executing program 34 (id=640): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@remote, 0xffff}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@local, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0x2}, {0x0, 0x3, 0xfffffffc}, 0x0, 0x4000, 0x2}}, 0xf0}}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) 5.540771564s ago: executing program 4 (id=1584): socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 5.512801756s ago: executing program 4 (id=1585): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000100000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000767c4a5830d3a2f700000000006ad99282c895e75eec"], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(r3, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) shutdown(r3, 0x1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32, @ANYBLOB="05002f0000001a9b428edacb7e61f2000000"], 0x2c}}, 0x18) 5.365946465s ago: executing program 4 (id=1588): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x27, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = dup(r0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000001180)=""/150) accept4$llc(r3, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x80000) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000f80)) 4.471432537s ago: executing program 7 (id=1596): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000100000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000767c4a5830d3a2f700000000006ad99282c895e75e"], 0x68) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r6, @ANYBLOB="05002f0000001a9b428edacb7e61f2000000"], 0x2c}}, 0x18) 3.349680893s ago: executing program 0 (id=1606): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x14, 0x40018020, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00000be000/0x1000)=nil, 0xffffffffdff41fff) r1 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x541b, 0xfffffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r5, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.291199016s ago: executing program 7 (id=1607): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x530000000000000, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x2, 0x2002) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 2.671914453s ago: executing program 1 (id=1610): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.485468894s ago: executing program 1 (id=1612): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="debe188eec6260ac131bb481f19f771d3841efc351d6a3253ebd53c7fc9ca4b2d33b9c7ae7e6d637a9c52374fcc31c89b71c8d73ca3a4fb616177d40aca1a183dd9185eb9290a25d18ca71d547e187758d2a97a37447dc6d99194ccb243da9b9cb387dfef5903aac100ac9273196f7e6c52fe8c97b9bd3f4993f4c8f08b3b25de2cfa173845933345906121fddb02f14a417863290253311d1d7fc76cc7cfa8cdddbb0880a9827ab5802a040978df76fc7350fab929df6731c7959", 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="07c6", 0x2}], 0x1}}], 0x2, 0x4) 2.467232135s ago: executing program 0 (id=1613): r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.395420879s ago: executing program 1 (id=1614): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r0, &(0x7f0000000140)=""/38, 0x26, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000780)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="07c6a2", 0x3}], 0x1}}], 0x2, 0x4) 2.358433652s ago: executing program 0 (id=1615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0000"], 0xfce) 2.21808578s ago: executing program 4 (id=1616): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x6, 0x2, [0x1, 0x7c61]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={r4}, &(0x7f00000001c0)=0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 2.116233636s ago: executing program 1 (id=1617): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000100000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000767c4a5830d3a2f700000000006ad99282c895e75e"], 0x68) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r6, @ANYBLOB="05002f0000001a9b428edacb7e61f2000000"], 0x2c}}, 0x18) 1.877935929s ago: executing program 7 (id=1618): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) truncate(&(0x7f0000000080)='./file2\x00', 0x81) 1.85962407s ago: executing program 0 (id=1619): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x0, 0x26}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=""/204, &(0x7f0000000100)=0xcc) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x20b, 0x8000000000002}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x5, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000a2b000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x50000000000) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x8000000a, 0x2}, 0x0, 0x0) 1.688202221s ago: executing program 6 (id=1620): openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000080)=0x6, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.351495621s ago: executing program 6 (id=1621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x200}, {0x9, 0x83cd, 0x1, 0x0, 0x6, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x13e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000640)="03", 0x1}], 0x1}, 0x4) 1.350976251s ago: executing program 7 (id=1622): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.301570723s ago: executing program 4 (id=1623): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x14, 0x40018020, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00000be000/0x1000)=nil, 0xffffffffdff41fff) r1 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x541b, 0xfffffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r5, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.265232275s ago: executing program 1 (id=1624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 339.05511ms ago: executing program 6 (id=1625): r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 334.00664ms ago: executing program 0 (id=1626): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000100000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000767c4a5830d3a2f700000000006ad99282c895e75eec"], 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(r3, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) shutdown(r3, 0x1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32, @ANYBLOB="05002f0000001a9b428edacb7e61f2000000"], 0x2c}}, 0x18) 241.825906ms ago: executing program 6 (id=1627): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r0, &(0x7f0000000140)=""/38, 0x26, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="07c6a2", 0x3}], 0x1}}], 0x2, 0x4) 233.974896ms ago: executing program 1 (id=1628): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x27, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = dup(r0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000001180)=""/150) accept4$llc(r3, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x80000) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000f80)) 196.529958ms ago: executing program 4 (id=1629): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x530000000000000, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x2, 0x2002) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 191.480349ms ago: executing program 0 (id=1630): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xff) syz_open_procfs(0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000001b40)={@dev}, &(0x7f0000001b80)=0x14) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x400, &(0x7f0000000440)=ANY=[@ANYBLOB="6d7009000000000000000000002254af4bf881db0ee3cb20cc50f7a4f22eae4beaf8b7e8a8cf5634c26a5c175829224a588b60c9d68b3a82b3ca07a76a108b5f8df5a1e520b6af91e6600d75451cd51cac578de7cddc912c7eb32ebac88d7fd75d8f2f867a61a2e2ef2ad2fea648bea016cea141bab2d72d4fff210afbbcddb6a18e4f546674d3637b9fd6d17eb94d4b17558c6202"]) mount$tmpfs(0x0, 0x0, 0x0, 0x420, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=int']) 138.867681ms ago: executing program 7 (id=1631): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xdce32}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) 73.609236ms ago: executing program 6 (id=1632): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 71.977966ms ago: executing program 7 (id=1633): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 0s ago: executing program 6 (id=1634): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): r 14 using dummy_hcd [ 106.308867][ T4391] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 106.311022][ T4391] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.313466][ T4391] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 106.315397][ T4391] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.335676][ T4391] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.356426][ T4391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.476896][ T4391] usb 1-1: invalid MIDI out EP 0 [ 106.525694][ T4391] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 106.720121][ T5471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.721749][ T5471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.006770][ T5473] udevd[5473]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.039499][ T3898] usb 1-1: USB disconnect, device number 14 [ 109.556715][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.558252][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.055149][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 112.071846][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 113.008523][ T5520] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 118.961752][ T5484] netlink: 'syz.2.295': attribute type 12 has an invalid length. [ 118.962998][ T5484] netlink: 'syz.2.295': attribute type 29 has an invalid length. [ 118.964076][ T5484] netlink: 'syz.2.295': attribute type 2 has an invalid length. [ 118.965150][ T5484] netlink: 260 bytes leftover after parsing attributes in process `syz.2.295'. [ 118.966554][ T5486] tipc: Enabling of bearer rejected, failed to enable media [ 118.998206][ T5519] netlink: 'syz.3.302': attribute type 3 has an invalid length. [ 119.207529][ T5532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'. [ 120.208024][ T5555] can0: slcan on ttyS3. [ 120.216409][ T5555] ubi31: attaching mtd0 [ 120.219608][ T5555] ubi31: scanning is finished [ 120.563438][ T5558] can0 (unregistered): slcan off ttyS3. [ 120.573397][ T5559] can0: slcan on ttyS3. [ 120.767913][ T5555] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 120.769207][ T5555] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 120.770345][ T5555] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 120.771419][ T5555] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 120.772519][ T5555] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 120.773594][ T5555] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 120.774838][ T5555] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1191103117 [ 120.776256][ T5555] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 120.777813][ T5560] ubi31: background thread "ubi_bgt31d" started, PID 5560 [ 121.292219][ T5552] can0 (unregistered): slcan off ttyS3. [ 121.380416][ T5578] tipc: Enabled bearer , priority 0 [ 121.385114][ T5578] device syzkaller0 entered promiscuous mode [ 121.394786][ T5578] tipc: Resetting bearer [ 121.397314][ T5577] tipc: Resetting bearer [ 121.483837][ T5577] tipc: Disabling bearer [ 122.626768][ T5606] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.807156][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.808956][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.213267][ T5621] can0: slcan on ttyS3. [ 123.492700][ T5621] can0 (unregistered): slcan off ttyS3. [ 124.599721][ T5645] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.019099][ T5650] binder: BINDER_SET_CONTEXT_MGR already set [ 125.020743][ T5650] binder: 5641:5650 ioctl 4018620d 20000180 returned -16 [ 125.472123][ T5659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.346'. [ 125.925244][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.926444][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.374449][ T5680] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 126.421958][ T3898] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 126.895519][ T5691] binder: BINDER_SET_CONTEXT_MGR already set [ 126.896646][ T5691] binder: 5685:5691 ioctl 4018620d 20000180 returned -16 [ 126.951534][ T3898] usb 1-1: Using ep0 maxpacket: 16 [ 127.082523][ T3898] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 127.083855][ T3898] usb 1-1: config 0 has no interface number 0 [ 127.084801][ T3898] usb 1-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 127.102423][ T3898] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 127.104833][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.106812][ T3898] usb 1-1: Product: syz [ 127.108924][ T3898] usb 1-1: Manufacturer: syz [ 127.109720][ T3898] usb 1-1: SerialNumber: syz [ 127.126658][ T3898] usb 1-1: config 0 descriptor?? [ 127.131514][ T5677] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.214763][ T3898] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 127.782840][ T4405] usb 1-1: USB disconnect, device number 15 [ 127.799647][ T39] usb 1-1: Failed to submit usb control message: -71 [ 127.861474][ T39] usb 1-1: unable to send the bmi data to the device: -71 [ 127.862809][ T39] usb 1-1: unable to get target info from device [ 127.863985][ T39] usb 1-1: could not get target info (-71) [ 127.865155][ T39] usb 1-1: could not probe fw (-71) [ 129.894652][ T5733] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 130.497118][ T5741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.371'. [ 132.289449][ T5759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.290994][ T5759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.746090][ T5772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.747473][ T5772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.605160][ T5782] ubi: mtd0 is already attached to ubi31 [ 136.241872][ T5781] slcan: can't register candev [ 140.247047][ T5825] ubi: mtd0 is already attached to ubi31 [ 140.832335][ T5824] slcan: can't register candev [ 141.035321][ T5829] binder: BINDER_SET_CONTEXT_MGR already set [ 141.036352][ T5829] binder: 5826:5829 ioctl 4018620d 20000180 returned -16 [ 141.740372][ T5831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.745654][ T5831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.659113][ T4328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.663307][ T4328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.665255][ T4328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.667179][ T4328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.668980][ T4328] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 142.670209][ T4328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.600531][ T4328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.613878][ T4328] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.616357][ T4328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.618234][ T4328] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.619785][ T4328] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.622179][ T4328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.721534][ T4328] Bluetooth: hci5: command 0x0409 tx timeout [ 144.902831][ T5732] netlink: 'syz.2.366': attribute type 3 has an invalid length. [ 145.703446][ T5882] ubi: mtd0 is already attached to ubi31 [ 145.996777][ T5881] can0: slcan on ttyS3. [ 146.063988][ T5881] can0 (unregistered): slcan off ttyS3. [ 146.122831][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 146.206645][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.207871][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.209402][ T5836] device bridge_slave_0 entered promiscuous mode [ 146.213479][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.214535][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.216094][ T5836] device bridge_slave_1 entered promiscuous mode [ 146.225409][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.242858][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.321814][ T4377] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 146.515103][ T4377] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.516722][ T4377] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.519699][ T4377] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.523120][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.641475][ T4322] Bluetooth: hci6: command 0x0409 tx timeout [ 146.674051][ T5836] team0: Port device team_slave_0 added [ 146.732193][ T4377] usb 1-1: usb_control_msg returned -32 [ 146.733097][ T4377] usbtmc 1-1:16.0: can't read capabilities [ 146.739003][ T5836] team0: Port device team_slave_1 added [ 146.801470][ T4328] Bluetooth: hci5: command 0x041b tx timeout [ 146.823529][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.830897][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 146.843248][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.844291][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.848062][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.851087][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.855446][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.859393][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.924374][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.965999][ T5836] device hsr_slave_0 entered promiscuous mode [ 147.001885][ T5836] device hsr_slave_1 entered promiscuous mode [ 147.043072][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.044333][ T5836] Cannot create hsr debugfs directory [ 147.045742][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.046860][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.048460][ T5861] device bridge_slave_0 entered promiscuous mode [ 147.142536][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.145403][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.146509][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.147935][ T5861] device bridge_slave_1 entered promiscuous mode [ 147.168706][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.184263][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.536789][ T5907] device bridge1 entered promiscuous mode [ 147.550287][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.552956][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.572392][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.590080][ T5861] team0: Port device team_slave_0 added [ 147.600603][ T5861] team0: Port device team_slave_1 added [ 147.617068][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.618669][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.623926][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.655301][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.656552][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.661624][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.728049][ T5861] device hsr_slave_0 entered promiscuous mode [ 147.765052][ T5861] device hsr_slave_1 entered promiscuous mode [ 147.801421][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.803307][ T5861] Cannot create hsr debugfs directory [ 147.846092][ T5836] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.896501][ T5836] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.935627][ T5836] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.009134][ T5836] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.037230][ T39] tipc: Left network mode [ 148.058139][ T5922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.060203][ T5922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.350242][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.362534][ T5861] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.403931][ T5861] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 148.506242][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.507775][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.509262][ T5861] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 148.596290][ T5938] netlink: 40 bytes leftover after parsing attributes in process `syz.4.411'. [ 148.600722][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.603067][ T5861] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 148.731494][ T4322] Bluetooth: hci6: command 0x041b tx timeout [ 148.747916][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.749775][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.751474][ T5039] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.752562][ T5039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.753782][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.755224][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.756548][ T5039] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.757547][ T5039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.758857][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.760450][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.881795][ T4328] Bluetooth: hci5: command 0x040f tx timeout [ 148.929864][ T5954] ubi: mtd0 is already attached to ubi31 [ 149.101032][ T24] usb 1-1: USB disconnect, device number 16 [ 149.135716][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.136021][ T5960] fuse: Bad value for 'fd' [ 149.148908][ T5953] can0: slcan on ttyS3. [ 149.149844][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.153954][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.158761][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.162988][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.164844][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.169745][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.172619][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.174344][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.176588][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.327905][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.369402][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.385319][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.447883][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.462803][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.464173][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.469196][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.470895][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.474306][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.475366][ T4947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.479906][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.482515][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.485087][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.486116][ T4947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.571187][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.572873][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.580644][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.582070][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.588322][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.590258][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.592507][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.597133][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.599613][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.609778][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.612809][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.632125][ T5945] can0 (unregistered): slcan off ttyS3. [ 149.666580][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.670442][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.674498][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.676804][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.811660][ T4322] Bluetooth: hci6: command 0x040f tx timeout [ 150.820836][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.839459][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.961515][ T4328] Bluetooth: hci5: command 0x0419 tx timeout [ 150.973060][ T6006] netlink: 40 bytes leftover after parsing attributes in process `syz.4.420'. [ 152.371308][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.373096][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.377537][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.712409][ T6023] netlink: 'syz.4.423': attribute type 10 has an invalid length. [ 152.715203][ T6023] team0: Device ipvlan0 failed to register rx_handler [ 152.724404][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.729480][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.746827][ T39] device hsr_slave_0 left promiscuous mode [ 152.782915][ T39] device hsr_slave_1 left promiscuous mode [ 152.861524][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.862767][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.864713][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.866094][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.867601][ T39] device bridge_slave_1 left promiscuous mode [ 152.870274][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.881441][ T4322] Bluetooth: hci6: command 0x0419 tx timeout [ 152.912725][ T39] device bridge_slave_0 left promiscuous mode [ 152.913778][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.031806][ T39] device veth1_macvtap left promiscuous mode [ 153.033020][ T39] device veth0_macvtap left promiscuous mode [ 153.034003][ T39] device veth1_vlan left promiscuous mode [ 153.035443][ T39] device veth0_vlan left promiscuous mode [ 153.204148][ T6029] fuse: Bad value for 'fd' [ 153.466106][ T6034] ubi: mtd0 is already attached to ubi31 [ 154.136673][ T6033] slcan: can't register candev [ 154.144302][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.146827][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.425404][ T6070] ubi: mtd0 is already attached to ubi31 [ 156.041912][ T6069] slcan: can't register candev [ 156.602958][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.605449][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.673580][ T39] team0 (unregistering): Port device team_slave_1 removed [ 156.833360][ T39] team0 (unregistering): Port device team_slave_0 removed [ 157.002002][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.255311][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.028736][ T6095] ubi: mtd0 is already attached to ubi31 [ 158.721500][ T4328] Bluetooth: hci2: command 0x0406 tx timeout [ 159.650206][ T39] bond0 (unregistering): Released all slaves [ 159.956476][ T5836] device veth0_vlan entered promiscuous mode [ 159.959664][ T5836] device veth1_vlan entered promiscuous mode [ 159.966591][ T1662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.968191][ T1662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.969744][ T1662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.989963][ T6113] device syzkaller0 entered promiscuous mode [ 159.995837][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.016627][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.312183][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.318126][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.404499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.406240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.427200][ T5836] device veth0_macvtap entered promiscuous mode [ 160.441189][ T5836] device veth1_macvtap entered promiscuous mode [ 160.462719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.464465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.466096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.467992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.475536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.479214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.497961][ T5861] device veth0_vlan entered promiscuous mode [ 160.542691][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.548653][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.565645][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.575087][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.965193][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.988223][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.996586][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.004729][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.014275][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.021077][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.025206][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.039594][ T5861] device veth1_vlan entered promiscuous mode [ 161.067434][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.074140][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.077994][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.083998][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.087604][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.093851][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.097688][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.100887][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.108633][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.116807][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.118787][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.221001][ T6152] ubi: mtd0 is already attached to ubi31 [ 161.386377][ T5861] device veth0_macvtap entered promiscuous mode [ 161.388766][ T5861] device veth1_macvtap entered promiscuous mode [ 161.392269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.393793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.395938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.397412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.467830][ T5836] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.480087][ T5836] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.485540][ T5836] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.487057][ T5836] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.538336][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.540170][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.545983][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.547662][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.825602][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.827368][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.838495][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.843437][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.846170][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.847841][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.862930][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.866996][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.870939][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.875737][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.880651][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.884300][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.889838][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.897389][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.898991][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.903927][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.915594][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.924281][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.928752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.930389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.932208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.942863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.961213][ T5861] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.974530][ T5861] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.976021][ T5861] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.980628][ T5861] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.993893][ T5039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.995314][ T5039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.997712][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.176107][ T5039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.177518][ T5039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.183221][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.202550][ T4759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.204125][ T4759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.206960][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.298679][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.300188][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.313635][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.768408][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.772310][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.948079][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.951179][ T6215] netlink: 'syz.6.401': attribute type 1 has an invalid length. [ 162.954370][ T6215] netlink: 'syz.6.401': attribute type 2 has an invalid length. [ 163.042905][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.102986][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.173051][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.419166][ T6242] ubi: mtd0 is already attached to ubi31 [ 164.053530][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.066206][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.641954][ T39] tipc: Disabling bearer [ 164.643717][ T39] tipc: Left network mode [ 164.674934][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.680785][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.284150][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.285841][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.079609][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.091714][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.498031][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.499904][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.887365][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.891191][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.396545][ T6406] netlink: 'syz.1.503': attribute type 16 has an invalid length. [ 168.397673][ T6406] netlink: 'syz.1.503': attribute type 2 has an invalid length. [ 168.398819][ T6406] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.503'. [ 168.852328][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.859434][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.235444][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.237163][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.819791][ T39] device hsr_slave_0 left promiscuous mode [ 169.902681][ T39] device hsr_slave_1 left promiscuous mode [ 169.972748][ T39] batman_adv: batadv0: Interface deactivated: dummy0 [ 169.974972][ T39] batman_adv: batadv0: Removing interface: dummy0 [ 169.978008][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.979240][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.980745][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.984175][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.991014][ T39] device bridge_slave_1 left promiscuous mode [ 169.997523][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.043304][ T39] device bridge_slave_0 left promiscuous mode [ 170.044532][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.152099][ T39] device veth1_macvtap left promiscuous mode [ 170.156457][ T39] device veth0_macvtap left promiscuous mode [ 170.159659][ T39] device veth1_vlan left promiscuous mode [ 170.164220][ T39] device veth0_vlan left promiscuous mode [ 170.397706][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.404783][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.998844][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.011290][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.629887][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.632803][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.823668][ T39] team0 (unregistering): Port device team_slave_1 removed [ 173.016085][ T39] team0 (unregistering): Port device team_slave_0 removed [ 173.213061][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.411872][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.012519][ T39] bond0 (unregistering): Released all slaves [ 175.298214][ T6498] tipc: Started in network mode [ 175.298997][ T6498] tipc: Node identity , cluster identity 4711 [ 175.299912][ T6498] tipc: Failed to obtain node identity [ 175.301062][ T6498] tipc: Enabling of bearer rejected, failed to enable media [ 175.831548][ T14] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 176.013096][ T14] usb 1-1: too many configurations: 39, using maximum allowed: 8 [ 176.025124][ T14] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.026633][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.027998][ T14] usb 1-1: Product: syz [ 176.028597][ T14] usb 1-1: Manufacturer: syz [ 176.030419][ T14] usb 1-1: SerialNumber: syz [ 176.043893][ T14] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 176.055798][ T14] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 176.059530][ T14] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 176.889993][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.901578][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.500925][ T6630] fuse: Bad value for 'fd' [ 178.282853][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.284375][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.453095][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.454642][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.578972][ T4405] usb 1-1: USB disconnect, device number 17 [ 179.081092][ T6672] can0: slcan on ttyS3. [ 179.090668][ T6672] ubi: mtd0 is already attached to ubi31 [ 179.391214][ T6675] fuse: Bad value for 'fd' [ 179.443112][ T6665] can0 (unregistered): slcan off ttyS3. [ 180.350767][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.413730][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.959723][ T6730] fuse: Bad value for 'fd' [ 181.446268][ T6747] can0: slcan on ttyS3. [ 181.456120][ T6747] ubi: mtd0 is already attached to ubi31 [ 182.490868][ T6739] can0 (unregistered): slcan off ttyS3. [ 182.606729][ T6762] netlink: 104 bytes leftover after parsing attributes in process `syz.1.585'. [ 183.683117][ T6823] can0: slcan on ttyS3. [ 183.685031][ T6823] ubi: mtd0 is already attached to ubi31 [ 184.461926][ T6817] can0 (unregistered): slcan off ttyS3. [ 184.514852][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 185.396639][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.400510][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.878044][ T6902] can0: slcan on ttyS3. [ 185.892662][ T6902] ubi: mtd0 is already attached to ubi31 [ 186.240473][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 186.367486][ T6917] netlink: 'syz.6.621': attribute type 12 has an invalid length. [ 186.368890][ T6917] netlink: 'syz.6.621': attribute type 29 has an invalid length. [ 186.370623][ T6917] netlink: 468 bytes leftover after parsing attributes in process `syz.6.621'. [ 186.560081][ T6940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.566372][ T6940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.641770][ T6894] can0 (unregistered): slcan off ttyS3. [ 187.362278][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.363346][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.401597][ T6987] binder: 6986:6987 tried to acquire reference to desc 0, got 1 instead [ 187.403510][ T6987] binder: 6986:6987 got transaction with invalid parent offset or type [ 187.405305][ T6987] binder: 6986:6987 transaction async to 6986:0 failed 25/29201/-22, size 80-24 line 3439 [ 187.407177][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.429504][ T6989] netlink: 'syz.1.632': attribute type 12 has an invalid length. [ 187.430721][ T6989] netlink: 'syz.1.632': attribute type 29 has an invalid length. [ 187.432351][ T6989] netlink: 468 bytes leftover after parsing attributes in process `syz.1.632'. [ 187.858354][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.860413][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.028709][ T7004] can0: slcan on ttyS3. [ 188.044005][ T7004] ubi: mtd0 is already attached to ubi31 [ 188.684243][ T6998] can0 (unregistered): slcan off ttyS3. [ 188.886564][ T4322] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.888911][ T4322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.890387][ T4322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.892585][ T4322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.894017][ T4322] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 188.895219][ T4322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.912263][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'. [ 188.994644][ T4526] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.143626][ T4526] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.414723][ T7054] chnl_net:caif_netlink_parms(): no params data found [ 189.482688][ T4526] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.492746][ T7054] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.494164][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.496114][ T7054] device bridge_slave_0 entered promiscuous mode [ 189.498455][ T7054] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.499607][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.501157][ T7054] device bridge_slave_1 entered promiscuous mode [ 189.513270][ T7054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.516330][ T7054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.526812][ T7054] team0: Port device team_slave_0 added [ 189.529357][ T7054] team0: Port device team_slave_1 added [ 189.582624][ T4526] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.587781][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.589198][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.593132][ T7054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.595570][ T7054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.596831][ T7054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.601058][ T7054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.633054][ T7054] device hsr_slave_0 entered promiscuous mode [ 189.652786][ T7054] device hsr_slave_1 entered promiscuous mode [ 189.681650][ T7054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.683165][ T7054] Cannot create hsr debugfs directory [ 189.756650][ T7054] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 189.786219][ T7054] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 189.858826][ T7054] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 189.902730][ T7054] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 190.381149][ T7054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.400135][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.406389][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.419870][ T7054] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.434481][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.436809][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.438394][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.439520][ T6244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.448747][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.454252][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.458181][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.465697][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.466890][ T6244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.496962][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.502956][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.510809][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.518249][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.535035][ T7054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.538108][ T7054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.548282][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.550108][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.556545][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.560686][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.568231][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.577784][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.859490][ T7054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.861190][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.868613][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.889762][ T7143] netlink: 'syz.6.651': attribute type 16 has an invalid length. [ 190.961497][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 190.977987][ T7148] fuse: Unknown parameter 'grou00000000000000000000' [ 191.187734][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.190553][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.230673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.232426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.245290][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.246937][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.249078][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.250791][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.257943][ T7054] device veth0_vlan entered promiscuous mode [ 191.264836][ T7054] device veth1_vlan entered promiscuous mode [ 191.279224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.280765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.284544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.286099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.289779][ T7054] device veth0_macvtap entered promiscuous mode [ 191.297169][ T7054] device veth1_macvtap entered promiscuous mode [ 191.303349][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.305257][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.306962][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.308719][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.310351][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.315840][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.317416][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.318971][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.320475][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.322158][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.324505][ T7054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.325785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.327302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.328688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.330106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.337229][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.338761][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.340256][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.342391][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.343977][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.345656][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.347303][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.349028][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.350681][ T7054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.355466][ T7054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.357854][ T7054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.359269][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.360911][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.365711][ T7054] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.367315][ T7054] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.368766][ T7054] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.370246][ T7054] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.425757][ T6760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.427265][ T6760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.429751][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.479715][ T4466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.482177][ T4466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.487300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.135594][ T7218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.138692][ T7218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.042219][ T4322] Bluetooth: hci1: command 0x041b tx timeout [ 193.629802][ T7240] fuse: Unknown parameter 'grou00000000000000000000' [ 193.881242][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.934751][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.541686][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.543708][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.029060][ T7275] NILFS (nullb0): couldn't find nilfs on the device [ 195.160550][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 195.191936][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.195384][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.621940][ T7296] fuse: Unknown parameter 'group_i00000000000000000000' [ 195.787501][ T4526] device hsr_slave_0 left promiscuous mode [ 195.802438][ T4526] device hsr_slave_1 left promiscuous mode [ 195.892903][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.895444][ T4526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.898994][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.900344][ T4526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.903866][ T4526] device bridge_slave_1 left promiscuous mode [ 195.907356][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.954260][ T4526] device bridge_slave_0 left promiscuous mode [ 195.955289][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.260886][ T7318] NILFS (nullb0): couldn't find nilfs on the device [ 196.452135][ T4526] device veth1_macvtap left promiscuous mode [ 196.453125][ T4526] device veth0_macvtap left promiscuous mode [ 196.454066][ T4526] device veth1_vlan left promiscuous mode [ 196.454969][ T4526] device veth0_vlan left promiscuous mode [ 196.693088][ T7332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.701286][ T7332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.708489][ T7336] fuse: Unknown parameter 'group_i00000000000000000000' [ 197.036636][ T7344] binder: BINDER_SET_CONTEXT_MGR already set [ 197.037644][ T7344] binder: 7339:7344 ioctl 4018620d 20000180 returned -16 [ 197.246886][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 199.166439][ T7357] NILFS (nullb0): couldn't find nilfs on the device [ 200.068998][ T7378] fuse: Unknown parameter 'group_i00000000000000000000' [ 200.155165][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.194694][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.470066][ T7388] binder: BINDER_SET_CONTEXT_MGR already set [ 200.471172][ T7388] binder: 7383:7388 ioctl 4018620d 20000180 returned -16 [ 200.885778][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.890426][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.120552][ T7398] NILFS (nullb0): couldn't find nilfs on the device [ 201.392837][ T7400] random: crng reseeded on system resumption [ 201.776888][ T4526] team0 (unregistering): Port device team_slave_1 removed [ 202.040615][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.054975][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.225033][ T4526] team0 (unregistering): Port device team_slave_0 removed [ 203.422429][ T7416] fuse: Unknown parameter 'group_id00000000000000000000' [ 203.453368][ T4526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.682798][ T4526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.491624][ T7431] binder: BINDER_SET_CONTEXT_MGR already set [ 204.492551][ T7431] binder: 7428:7431 ioctl 4018620d 20000180 returned -16 [ 205.153973][ T7439] NILFS (nullb0): couldn't find nilfs on the device [ 205.842603][ T4526] bond0 (unregistering): Released all slaves [ 206.115772][ T7454] fuse: Unknown parameter 'group_id00000000000000000000' [ 206.116495][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.119320][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.124721][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.127153][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.468559][ T7477] binder: BINDER_SET_CONTEXT_MGR already set [ 206.468582][ T7477] binder: 7470:7477 ioctl 4018620d 20000180 returned -16 [ 206.745622][ T7476] NILFS (nullb0): couldn't find nilfs on the device [ 207.008227][ T7498] fuse: Unknown parameter 'group_id00000000000000000000' [ 207.068157][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.071767][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.334163][ T7512] Illegal XDP return value 4294967274 on prog (id 50) dev N/A, expect packet loss! [ 208.429104][ T7525] device syzkaller0 entered promiscuous mode [ 208.527768][ T7535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.539233][ T7535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.392661][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.394247][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.984885][ T7547] NILFS (nullb0): couldn't find nilfs on the device [ 211.143100][ T7561] binder: BINDER_SET_CONTEXT_MGR already set [ 211.144063][ T7561] binder: 7558:7561 ioctl 4018620d 20000180 returned -16 [ 212.115649][ T7573] ubi: mtd0 is already attached to ubi31 [ 212.811944][ T7572] slcan: can't register candev [ 220.311020][ T7598] NILFS (nullb0): couldn't find nilfs on the device [ 220.595110][ T7615] binder: BINDER_SET_CONTEXT_MGR already set [ 220.596023][ T7615] binder: 7601:7615 ioctl 4018620d 20000180 returned -16 [ 220.808397][ T7634] can0: slcan on ttyS3. [ 220.819842][ T7634] ubi: mtd0 is already attached to ubi31 [ 221.101086][ T7638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.112315][ T7638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.410373][ T7658] fuse: Invalid rootmode [ 221.501559][ T7624] can0 (unregistered): slcan off ttyS3. [ 221.852624][ T7690] NILFS (nullb0): couldn't find nilfs on the device [ 221.986149][ T7692] binder: BINDER_SET_CONTEXT_MGR already set [ 221.987111][ T7692] binder: 7688:7692 ioctl 4018620d 20000180 returned -16 [ 222.196474][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 222.280371][ T7703] fuse: Bad value for 'rootmode' [ 222.626750][ T7730] can0: slcan on ttyS3. [ 222.636825][ T7730] ubi: mtd0 is already attached to ubi31 [ 222.999437][ T7743] fuse: Bad value for 'rootmode' [ 223.281960][ T7716] can0 (unregistered): slcan off ttyS3. [ 223.433128][ T7767] binder: BINDER_SET_CONTEXT_MGR already set [ 223.434063][ T7767] binder: 7765:7767 ioctl 4018620d 20000180 returned -16 [ 223.508108][ T7775] NILFS (nullb0): couldn't find nilfs on the device [ 224.025373][ T7796] fuse: Bad value for 'rootmode' [ 224.695938][ T7828] can0: slcan on ttyS3. [ 224.703342][ T7828] ubi: mtd0 is already attached to ubi31 [ 225.109944][ T7838] fuse: Unknown parameter 'use00000000000000000000' [ 225.367641][ T7847] binder: BINDER_SET_CONTEXT_MGR already set [ 225.368652][ T7847] binder: 7841:7847 ioctl 4018620d 20000180 returned -16 [ 225.570431][ T7852] fuse: Unknown parameter 'group_id00000000000000000000' [ 225.604361][ T7856] NILFS (nullb0): couldn't find nilfs on the device [ 225.815855][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 226.349467][ T7884] fuse: Unknown parameter 'use00000000000000000000' [ 226.479996][ T7844] can0 (unregistered): slcan off ttyS3. [ 226.536476][ T7893] can0: slcan on ttyS3. [ 226.538623][ T7893] ubi: mtd0 is already attached to ubi31 [ 227.071101][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.077642][ T7913] syz.1.830 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 227.082727][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.301859][ T7888] can0 (unregistered): slcan off ttyS3. [ 227.733051][ T7928] binder: BINDER_SET_CONTEXT_MGR already set [ 227.734036][ T7928] binder: 7922:7928 ioctl 4018620d 20000180 returned -16 [ 228.543504][ T7946] NILFS (nullb0): couldn't find nilfs on the device [ 229.034515][ T7960] can0: slcan on ttyS3. [ 229.036676][ T7960] ubi: mtd0 is already attached to ubi31 [ 230.711634][ T7957] can0 (unregistered): slcan off ttyS3. [ 230.720995][ T7984] binder: BINDER_SET_CONTEXT_MGR already set [ 230.722152][ T7984] binder: 7979:7984 ioctl 4018620d 20000180 returned -16 [ 230.731412][ T7987] fuse: Unknown parameter 'user_i00000000000000000000' [ 231.209854][ T8013] netlink: 592 bytes leftover after parsing attributes in process `syz.1.858'. [ 231.354434][ T8025] NILFS (nullb0): couldn't find nilfs on the device [ 231.532087][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.534188][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.152503][ T8054] binder: BINDER_SET_CONTEXT_MGR already set [ 232.153443][ T8054] binder: 8049:8054 ioctl 4018620d 20000180 returned -16 [ 232.214767][ T8056] can0: slcan on ttyS3. [ 232.216964][ T8056] ubi: mtd0 is already attached to ubi31 [ 232.409483][ T8073] netlink: 592 bytes leftover after parsing attributes in process `syz.0.871'. [ 232.695768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 233.371861][ T8041] can0 (unregistered): slcan off ttyS3. [ 233.603848][ T8125] netlink: 592 bytes leftover after parsing attributes in process `syz.7.883'. [ 233.769732][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.771307][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.842412][ T8147] binder: BINDER_SET_CONTEXT_MGR already set [ 233.843578][ T8147] binder: 8135:8147 ioctl 4018620d 20000180 returned -16 [ 234.474832][ T8167] can0: slcan on ttyS3. [ 234.477034][ T8167] ubi: mtd0 is already attached to ubi31 [ 234.641724][ T8163] can0 (unregistered): slcan off ttyS3. [ 235.657584][ T8210] binder: BINDER_SET_CONTEXT_MGR already set [ 235.658705][ T8210] binder: 8203:8210 ioctl 4018620d 20000180 returned -16 [ 235.919346][ T8220] can0: slcan on ttyS3. [ 235.921508][ T8220] ubi: mtd0 is already attached to ubi31 [ 236.071901][ T8216] can0 (unregistered): slcan off ttyS3. [ 236.378828][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.380582][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.400789][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.402897][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.805757][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.807272][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.009595][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.011100][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.031005][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.032846][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.806050][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.808888][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.018503][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.020020][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.026436][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.029240][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.151194][ T8309] binder: BINDER_SET_CONTEXT_MGR already set [ 238.152306][ T8309] binder: 8307:8309 ioctl 4018620d 20000180 returned -16 [ 238.189941][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.209531][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.572062][ T14] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 238.573500][ T14] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 238.574663][ T14] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw [ 238.583719][ T8317] netlink: 592 bytes leftover after parsing attributes in process `syz.4.933'. [ 238.714423][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.742297][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.769863][ T8333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.771304][ T8333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.111258][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.114276][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.272672][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.274100][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.374103][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.375483][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.915905][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.919750][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.921193][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.928903][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.936757][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.939162][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.945816][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.948625][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.150958][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.152423][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.154479][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.158536][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.170958][ T8394] fuse: Unknown parameter '0x0000000000000004' [ 240.375027][ T8397] can0: slcan on ttyS3. [ 240.377013][ T8397] ubi: mtd0 is already attached to ubi31 [ 240.411315][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.412838][ T8396] can0 (unregistered): slcan off ttyS3. [ 240.413229][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.473139][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.475528][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.639390][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.640838][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.178562][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.179937][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.628146][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.636204][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.645018][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.658028][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.787601][ T8448] can0: slcan on ttyS3. [ 241.789635][ T8448] ubi: mtd0 is already attached to ubi31 [ 241.831945][ T8446] can0 (unregistered): slcan off ttyS3. [ 242.046578][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.051248][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.170493][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.177534][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.795844][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.797853][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.851329][ T8494] fuse: Invalid rootmode [ 243.848272][ T8524] fuse: Bad value for 'rootmode' [ 244.530791][ T8552] fuse: Bad value for 'rootmode' [ 244.554736][ T8555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.557069][ T8555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.932400][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 245.079531][ T8584] fuse: Bad value for 'rootmode' [ 245.166871][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1015'. [ 245.997765][ T8618] fuse: Unknown parameter 'use00000000000000000000' [ 248.802168][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.803208][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.001465][ T4322] Bluetooth: hci4: command 0x0406 tx timeout [ 256.186452][ T8604] netlink: 'syz.6.1018': attribute type 1 has an invalid length. [ 256.187683][ T8604] netlink: 64475 bytes leftover after parsing attributes in process `syz.6.1018'. [ 256.201535][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 256.222940][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.224370][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.292228][ T8653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.294263][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 256.294573][ T8653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.941080][ T8669] loop7: detected capacity change from 0 to 2048 [ 257.406488][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.413474][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.463425][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1067'. [ 258.536425][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1070'. [ 259.447565][ T8786] fuse: Bad value for 'fd' [ 259.635592][ T8801] xt_hashlimit: size too large, truncated to 1048576 [ 260.321382][ T27] audit: type=1326 audit(272.298:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81375928 code=0x7ffc0000 [ 260.324958][ T27] audit: type=1326 audit(272.308:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81375928 code=0x7ffc0000 [ 260.329841][ T27] audit: type=1326 audit(272.308:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81375928 code=0x7ffc0000 [ 260.336912][ T27] audit: type=1326 audit(272.308:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81375928 code=0x7ffc0000 [ 260.344623][ T27] audit: type=1326 audit(272.318:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff81375928 code=0x7ffc0000 [ 260.350559][ T27] audit: type=1326 audit(272.318:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff81375620 code=0x7ffc0000 [ 260.358785][ T27] audit: type=1326 audit(272.338:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff813588ec code=0x7ffc0000 [ 260.373658][ T27] audit: type=1326 audit(272.358:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff813756cc code=0x7ffc0000 [ 260.378027][ T27] audit: type=1326 audit(272.358:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff813588ec code=0x7ffc0000 [ 260.382893][ T27] audit: type=1326 audit(272.368:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8825 comm="syz.4.1098" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff81375550 code=0x7ffc0000 [ 260.386019][ T8826] loop4: detected capacity change from 0 to 8192 [ 260.426885][ T8826] loop4: p1 p3 p4 [ 260.428887][ T8826] loop4: partition table partially beyond EOD, truncated [ 260.437385][ T8826] loop4: p1 size 477167616 extends beyond EOD, truncated [ 260.444523][ T8826] loop4: p3 start 4294901760 is beyond EOD, truncated [ 260.447691][ T8826] loop4: p4 size 32768 extends beyond EOD, truncated [ 260.539464][ T8641] udevd[8641]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 260.540703][ T8682] udevd[8682]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 261.349784][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 261.979260][ T8884] NILFS (nullb0): couldn't find nilfs on the device [ 262.366067][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1119'. [ 262.406265][ T8894] random: crng reseeded on system resumption [ 262.483890][ T8897] loop6: detected capacity change from 0 to 256 [ 262.595743][ T8901] infiniband syz2: set active [ 262.598016][ T8901] infiniband syz2: added bond_slave_1 [ 262.675974][ T8901] RDS/IB: syz2: added [ 262.676871][ T8901] smc: adding ib device syz2 with port count 1 [ 262.677897][ T8901] smc: ib device syz2 port 1 has pnetid [ 262.682708][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.684092][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.742589][ T8898] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.415311][ T8921] loop4: detected capacity change from 0 to 2048 [ 263.504588][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1130'. [ 263.529308][ T8927] loop6: detected capacity change from 0 to 1024 [ 263.530998][ T8927] EXT4-fs: Ignoring removed bh option [ 263.535868][ T8927] ext4: Unknown parameter 'smackfsroot' [ 263.595903][ T8641] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.827982][ T8938] NILFS (nullb0): couldn't find nilfs on the device [ 265.387780][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 265.394428][ T8966] 9pnet_fd: Insufficient options for proto=fd [ 265.821531][ T8987] NILFS (nullb0): couldn't find nilfs on the device [ 266.889721][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.892014][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.222290][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 267.346943][ T9024] netlink: 'syz.4.1162': attribute type 3 has an invalid length. [ 267.349785][ T9024] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1162'. [ 267.361762][ T9026] Unsupported ieee802154 address type: 0 [ 267.508877][ T9045] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.231846][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1172'. [ 268.237967][ T9069] 9pnet_fd: Insufficient options for proto=fd [ 268.256249][ T9068] device syzkaller0 entered promiscuous mode [ 268.316831][ T9076] netlink: 'syz.6.1176': attribute type 3 has an invalid length. [ 268.318136][ T9076] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1176'. [ 268.330647][ T9068] tipc: Started in network mode [ 268.331976][ T9068] tipc: Node identity 7e58913044ca, cluster identity 4711 [ 268.343739][ T9068] tipc: Enabled bearer , priority 0 [ 268.354394][ T9066] tipc: Resetting bearer [ 268.478318][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.480768][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.804901][ T9066] tipc: Disabling bearer [ 268.879424][ T9109] 9pnet_fd: Insufficient options for proto=fd [ 269.056052][ T9121] netlink: 'syz.7.1190': attribute type 3 has an invalid length. [ 269.057934][ T9121] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1190'. [ 269.314930][ T9127] loop6: detected capacity change from 0 to 1764 [ 269.851714][ T9145] fuse: Unknown parameter 'fd0x0000000000000003' [ 270.017325][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.020594][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.227608][ T9160] netlink: 'syz.6.1203': attribute type 3 has an invalid length. [ 270.228960][ T9160] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1203'. [ 270.344332][ T9166] loop6: detected capacity change from 0 to 512 [ 270.346913][ T9166] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 270.349010][ T9166] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 270.659243][ T9166] EXT4-fs (loop6): 1 truncate cleaned up [ 270.673990][ T9166] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 270.736399][ T5861] EXT4-fs (loop6): unmounting filesystem. [ 270.846231][ T9179] fuse: Unknown parameter 'fd0x0000000000000003' [ 270.962895][ T9182] NILFS (nullb0): couldn't find nilfs on the device [ 271.361430][ T4322] Bluetooth: hci6: command 0x0406 tx timeout [ 271.947515][ T9200] netlink: 'syz.0.1215': attribute type 3 has an invalid length. [ 271.949615][ T9200] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1215'. [ 272.272447][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1221'. [ 272.630498][ T9240] NILFS (nullb0): couldn't find nilfs on the device [ 272.858463][ T9242] netlink: 'syz.4.1228': attribute type 3 has an invalid length. [ 272.859891][ T9242] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1228'. [ 273.326697][ T9254] can0: slcan on ttyS3. [ 273.346499][ T9254] ubi: mtd0 is already attached to ubi31 [ 273.738786][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 273.932452][ T9252] can0 (unregistered): slcan off ttyS3. [ 274.102110][ T9335] NILFS (nullb0): couldn't find nilfs on the device [ 274.663917][ T9369] loop7: detected capacity change from 0 to 256 [ 274.842483][ T9380] loop6: detected capacity change from 0 to 512 [ 274.863108][ T9380] EXT4-fs: Ignoring removed i_version option [ 274.864074][ T9380] EXT4-fs: Ignoring removed nobh option [ 274.878909][ T9380] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 274.930882][ T9380] EXT4-fs (loop6): 1 truncate cleaned up [ 274.934244][ T9380] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 274.995766][ T5861] EXT4-fs (loop6): unmounting filesystem. [ 275.114871][ T9386] can0: slcan on ttyS3. [ 275.116785][ T9386] ubi: mtd0 is already attached to ubi31 [ 275.455853][ T9406] loop4: detected capacity change from 0 to 512 [ 275.508970][ T9406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 275.629383][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 275.639253][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 275.676364][ T9427] netlink: 'syz.4.1274': attribute type 3 has an invalid length. [ 275.677594][ T9427] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1274'. [ 275.781503][ T9377] can0 (unregistered): slcan off ttyS3. [ 276.303937][ T9453] NILFS (nullb0): couldn't find nilfs on the device [ 276.378823][ T9459] netlink: 'syz.0.1280': attribute type 29 has an invalid length. [ 276.395111][ T9459] netlink: 'syz.0.1280': attribute type 29 has an invalid length. [ 276.404109][ T9459] netlink: 'syz.0.1280': attribute type 29 has an invalid length. [ 276.405888][ T9459] netlink: 'syz.0.1280': attribute type 29 has an invalid length. [ 277.467940][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 277.467953][ T27] audit: type=1326 audit(289.448:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf75928 code=0x7ffc0000 [ 277.472776][ T27] audit: type=1326 audit(289.448:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff8bf75928 code=0x7ffc0000 [ 277.481315][ T27] audit: type=1326 audit(289.448:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf75928 code=0x7ffc0000 [ 277.491597][ T9496] fuse: Unknown parameter 'grou00000000000000000000' [ 277.494960][ T27] audit: type=1326 audit(289.448:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffff8bf75928 code=0x7ffc0000 [ 277.500173][ T27] audit: type=1326 audit(289.448:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.1.1285" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf75928 code=0x7ffc0000 [ 277.704534][ T9509] netlink: 'syz.0.1292': attribute type 39 has an invalid length. [ 277.859600][ T9513] binder: BINDER_SET_CONTEXT_MGR already set [ 277.860721][ T9513] binder: 9502:9513 ioctl 4018620d 20000180 returned -16 [ 277.985682][ T9514] can0: slcan on ttyS3. [ 277.987792][ T9514] ubi: mtd0 is already attached to ubi31 [ 278.274703][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 278.423794][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 278.452130][ T9499] can0 (unregistered): slcan off ttyS3. [ 279.517245][ T9624] binder: BINDER_SET_CONTEXT_MGR already set [ 279.518224][ T9624] binder: 9614:9624 ioctl 4018620d 20000180 returned -16 [ 281.008973][ T9684] binder: BINDER_SET_CONTEXT_MGR already set [ 281.010095][ T9684] binder: 9678:9684 ioctl 4018620d 20000180 returned -16 [ 282.154436][ T9718] NILFS (nullb0): couldn't find nilfs on the device [ 282.860122][ T9745] netlink: 'syz.1.1356': attribute type 39 has an invalid length. [ 283.309059][ T9761] loop6: detected capacity change from 0 to 256 [ 283.310673][ T9760] binder: BINDER_SET_CONTEXT_MGR already set [ 283.314587][ T9760] binder: 9749:9760 ioctl 4018620d 20000180 returned -16 [ 283.631649][ T9769] NILFS (nullb0): couldn't find nilfs on the device [ 284.509851][ T9795] loop6: detected capacity change from 0 to 256 [ 284.720684][ T9799] 9pnet_fd: Insufficient options for proto=fd [ 285.232437][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 285.489591][ T9818] binder: BINDER_SET_CONTEXT_MGR already set [ 285.491181][ T9818] binder: 9809:9818 ioctl 4018620d 20000180 returned -16 [ 285.874412][ T9822] NILFS (nullb0): couldn't find nilfs on the device [ 286.075722][ T9826] loop7: detected capacity change from 0 to 256 [ 286.190941][ T9830] 9pnet_fd: Insufficient options for proto=fd [ 286.315093][ T9834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.316560][ T9834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.318333][ T9834] netlink: 'syz.1.1388': attribute type 10 has an invalid length. [ 286.323300][ T9834] team0: Device ipvlan0 failed to register rx_handler [ 287.188541][ T9853] loop4: detected capacity change from 0 to 256 [ 287.388238][ T9859] 9pnet_fd: Insufficient options for proto=fd [ 287.644638][ T9870] binder: BINDER_SET_CONTEXT_MGR already set [ 287.645618][ T9870] binder: 9860:9870 ioctl 4018620d 20000180 returned -16 [ 288.257348][ T9884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.258852][ T9884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.261074][ T9884] netlink: 'syz.6.1407': attribute type 10 has an invalid length. [ 288.265055][ T9884] team0: Device ipvlan0 failed to register rx_handler [ 288.805761][ T9898] binder: BINDER_SET_CONTEXT_MGR already set [ 288.806664][ T9898] binder: 9897:9898 ioctl 4018620d 20000180 returned -16 [ 289.224404][ T9906] loop7: detected capacity change from 0 to 2048 [ 289.309700][ T9906] Alternate GPT is invalid, using primary GPT. [ 289.310938][ T9906] loop7: p2 p3 p7 [ 289.478956][ T8830] udevd[8830]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 289.481081][ T8641] udevd[8641]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 289.494387][ T8682] udevd[8682]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 290.269811][ T9946] netlink: 'syz.6.1426': attribute type 3 has an invalid length. [ 290.271128][ T9946] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1426'. [ 290.540127][ T9955] binder: BINDER_SET_CONTEXT_MGR already set [ 290.540160][ T9955] binder: 9950:9955 ioctl 4018620d 20000180 returned -16 [ 291.167301][ T9957] loop6: detected capacity change from 0 to 256 [ 300.017455][ T14] usb 1-1: no suitable firmware found! [ 300.018440][ T14] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 300.020351][ T4405] usb 1-1: ath9k_htc: USB layer deinitialized [ 300.444556][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1430'. [ 300.492987][ T9972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.628764][ T9988] binder: BINDER_SET_CONTEXT_MGR already set [ 300.629729][ T9988] binder: 9976:9988 ioctl 4018620d 20000180 returned -16 [ 301.154571][T10001] loop4: detected capacity change from 0 to 256 [ 301.244627][T10004] binder: BINDER_SET_CONTEXT_MGR already set [ 301.245722][T10004] binder: 9995:10004 ioctl 4018620d 20000180 returned -16 [ 301.580164][T10008] loop4: detected capacity change from 0 to 256 [ 301.646031][T10008] FAT-fs (loop4): Directory bread(block 64) failed [ 301.648042][T10008] FAT-fs (loop4): Directory bread(block 65) failed [ 301.649198][T10008] FAT-fs (loop4): Directory bread(block 66) failed [ 301.650308][T10008] FAT-fs (loop4): Directory bread(block 67) failed [ 301.652161][T10008] FAT-fs (loop4): Directory bread(block 68) failed [ 301.655491][T10008] FAT-fs (loop4): Directory bread(block 69) failed [ 301.657666][T10008] FAT-fs (loop4): Directory bread(block 70) failed [ 301.660925][T10008] FAT-fs (loop4): Directory bread(block 71) failed [ 301.662559][T10008] FAT-fs (loop4): Directory bread(block 72) failed [ 301.663809][T10008] FAT-fs (loop4): Directory bread(block 73) failed [ 301.742893][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.744365][T10008] FAT-fs (loop4): Filesystem has been set read-only [ 301.745693][T10008] syz.4.1447: attempt to access beyond end of device [ 301.745693][T10008] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 301.748033][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.749515][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.750956][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.752790][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.754286][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.756039][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.757391][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.758762][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.760237][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.767319][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.768933][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.770270][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.772212][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.773638][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.775124][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.776623][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.778468][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.779977][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.781767][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.783239][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.785765][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.789196][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.790797][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.792641][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.794122][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.795408][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.796705][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.798040][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.799712][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.801191][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.803155][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.804541][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.806048][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.807368][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.808701][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.810361][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.812217][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.813603][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.815019][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.816357][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.817764][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.819296][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.820910][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.822734][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.824126][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.825622][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.826884][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.828116][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.829446][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.830724][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.839445][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.840917][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.842681][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.844184][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.845607][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.846932][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.848359][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.849770][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.851208][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.853003][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.857021][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.858487][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.860542][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.862352][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.863673][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.864904][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.866979][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.868394][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.869751][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.871175][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.875622][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.877216][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.878675][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.879983][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.889797][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.891268][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.897787][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.899210][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.900701][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.902755][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.905580][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.908755][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.910256][T10008] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 301.942756][T10008] syz.4.1447: attempt to access beyond end of device [ 301.942756][T10008] loop4: rw=0, sector=1744, nr_sectors = 8 limit=256 [ 301.944871][T10008] syz.4.1447: attempt to access beyond end of device [ 301.944871][T10008] loop4: rw=0, sector=1744, nr_sectors = 8 limit=256 [ 301.945533][ T3898] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 301.947018][T10008] syz.4.1447: attempt to access beyond end of device [ 301.947018][T10008] loop4: rw=0, sector=1744, nr_sectors = 8 limit=256 [ 302.026081][T10028] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1454'. [ 302.027508][T10028] bond0: invalid ARP target 255.255.255.255 specified for addition [ 302.028765][T10028] bond0: option arp_ip_target: invalid value (4294967295) [ 302.121555][ T3898] usb 1-1: Using ep0 maxpacket: 32 [ 302.123963][ T3898] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 302.125171][ T3898] usb 1-1: config 0 has no interface number 0 [ 302.126084][ T3898] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 302.129812][ T3898] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 302.131856][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.139700][ T3898] usb 1-1: Product: syz [ 302.140400][ T3898] usb 1-1: Manufacturer: syz [ 302.141195][ T3898] usb 1-1: SerialNumber: syz [ 302.144856][ T3898] usb 1-1: config 0 descriptor?? [ 302.146371][T10010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 302.540949][T10010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 302.613958][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1463'. [ 302.615590][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1463'. [ 302.617107][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1463'. [ 302.650880][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.652845][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.859528][T10058] binder: 10049:10058 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 303.109498][T10010] netlink: 'syz.0.1445': attribute type 10 has an invalid length. [ 303.114280][T10010] team0: Device ipvlan0 failed to register rx_handler [ 303.143921][ T3898] asix 1-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 303.146075][ T3898] asix: probe of 1-1:0.191 failed with error -71 [ 303.155773][ T3898] usb 1-1: USB disconnect, device number 18 [ 303.938844][T10087] netlink: 'syz.4.1476': attribute type 39 has an invalid length. [ 304.455073][T10106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.456630][T10106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.465468][T10108] loop4: detected capacity change from 0 to 1024 [ 304.466947][T10108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.468393][T10108] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 304.539262][T10109] binder: BINDER_SET_CONTEXT_MGR already set [ 304.540382][T10109] binder: 10097:10109 ioctl 4018620d 20000180 returned -16 [ 304.920521][T10108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 304.994683][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 305.498133][T10145] loop4: detected capacity change from 0 to 1024 [ 305.517965][T10145] EXT4-fs: Ignoring removed mblk_io_submit option [ 305.531778][T10145] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.593645][T10145] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 305.613155][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.614551][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.616329][T10147] netlink: 'syz.1.1500': attribute type 10 has an invalid length. [ 305.619262][T10147] team0: Device ipvlan0 failed to register rx_handler [ 305.659178][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 305.905227][T10167] binder: BINDER_SET_CONTEXT_MGR already set [ 305.906343][T10167] binder: 10162:10167 ioctl 4018620d 20000180 returned -16 [ 306.138435][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1508'. [ 306.440914][T10177] netlink: 'syz.0.1511': attribute type 39 has an invalid length. [ 306.488012][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1512'. [ 306.511726][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'. [ 306.724399][T10206] netlink: 'syz.1.1524': attribute type 39 has an invalid length. [ 306.744065][T10203] binder: BINDER_SET_CONTEXT_MGR already set [ 306.745031][T10203] binder: 10196:10203 ioctl 4018620d 20000180 returned -16 [ 306.910569][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 307.161164][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.162959][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.167097][T10223] netlink: 'syz.4.1530': attribute type 10 has an invalid length. [ 307.169244][T10223] team0: Device ipvlan0 failed to register rx_handler [ 307.389739][T10229] binder: BINDER_SET_CONTEXT_MGR already set [ 307.390825][T10229] binder: 10226:10229 ioctl 4018620d 20000180 returned -16 [ 307.700713][T10233] loop6: detected capacity change from 0 to 512 [ 307.739191][T10233] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 307.776665][T10233] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.1534: corrupted xattr block 33 [ 307.781680][T10237] netlink: 'syz.0.1535': attribute type 39 has an invalid length. [ 307.787262][T10233] fscrypt (loop6, inode 15): Error -117 getting encryption context [ 307.806096][ T5861] EXT4-fs (loop6): unmounting filesystem. [ 307.945175][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.949959][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.001009][T10248] loop4: detected capacity change from 0 to 256 [ 308.009265][T10250] capability: warning: `syz.7.1541' uses deprecated v2 capabilities in a way that may be insecure [ 308.027842][T10248] FAT-fs (loop4): Directory bread(block 64) failed [ 308.030133][T10248] FAT-fs (loop4): Directory bread(block 65) failed [ 308.035242][T10248] FAT-fs (loop4): Directory bread(block 66) failed [ 308.038565][T10248] FAT-fs (loop4): Directory bread(block 67) failed [ 308.041817][T10248] FAT-fs (loop4): Directory bread(block 68) failed [ 308.046622][T10248] FAT-fs (loop4): Directory bread(block 69) failed [ 308.047867][T10248] FAT-fs (loop4): Directory bread(block 70) failed [ 308.048975][T10248] FAT-fs (loop4): Directory bread(block 71) failed [ 308.050081][T10248] FAT-fs (loop4): Directory bread(block 72) failed [ 308.051125][T10248] FAT-fs (loop4): Directory bread(block 73) failed [ 308.185181][T10262] netlink: 'syz.4.1546': attribute type 39 has an invalid length. [ 308.214457][T10258] binder: BINDER_SET_CONTEXT_MGR already set [ 308.215328][T10258] binder: 10255:10258 ioctl 4018620d 20000180 returned -16 [ 308.377275][T10269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.379946][T10269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.387428][T10269] netlink: 'syz.7.1550': attribute type 10 has an invalid length. [ 308.398632][T10269] team0: Device ipvlan0 failed to register rx_handler [ 308.548066][T10276] loop6: detected capacity change from 0 to 512 [ 308.579156][T10276] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 308.591323][T10276] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.1551: corrupted xattr block 33 [ 308.595695][T10276] fscrypt (loop6, inode 15): Error -117 getting encryption context [ 308.627096][ T5861] EXT4-fs (loop6): unmounting filesystem. [ 308.684954][T10281] loop6: detected capacity change from 0 to 1024 [ 308.690664][T10281] EXT4-fs: inline encryption not supported [ 308.698479][T10281] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.726688][T10281] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 308.762328][ T5861] EXT4-fs (loop6): unmounting filesystem. [ 308.974422][T10287] binder: BINDER_SET_CONTEXT_MGR already set [ 308.975497][T10287] binder: 10284:10287 ioctl 4018620d 20000180 returned -16 [ 309.579372][T10300] can0: slcan on ttyS3. [ 309.581775][T10300] ubi: mtd0 is already attached to ubi31 [ 309.909677][T10304] netlink: 'syz.6.1560': attribute type 39 has an invalid length. [ 310.337012][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.337082][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.431655][T10294] can0 (unregistered): slcan off ttyS3. [ 311.169948][T10323] device syzkaller0 entered promiscuous mode [ 311.206603][T10325] loop6: detected capacity change from 0 to 256 [ 311.229790][T10325] FAT-fs (loop6): Directory bread(block 64) failed [ 311.231053][T10325] FAT-fs (loop6): Directory bread(block 65) failed [ 311.237701][T10325] FAT-fs (loop6): Directory bread(block 66) failed [ 311.239809][T10325] FAT-fs (loop6): Directory bread(block 67) failed [ 311.242887][T10325] FAT-fs (loop6): Directory bread(block 68) failed [ 311.244053][T10325] FAT-fs (loop6): Directory bread(block 69) failed [ 311.245163][T10325] FAT-fs (loop6): Directory bread(block 70) failed [ 311.246238][T10325] FAT-fs (loop6): Directory bread(block 71) failed [ 311.247300][T10325] FAT-fs (loop6): Directory bread(block 72) failed [ 311.248354][T10325] FAT-fs (loop6): Directory bread(block 73) failed [ 311.365304][T10328] loop6: detected capacity change from 0 to 1024 [ 311.366778][T10328] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.368260][T10328] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 311.452903][T10328] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 311.624467][T10340] binder: BINDER_SET_CONTEXT_MGR already set [ 311.625526][T10340] binder: 10335:10340 ioctl 4018620d 20000180 returned -16 [ 311.646079][ T5861] EXT4-fs (loop6): unmounting filesystem. [ 312.181492][ T4391] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 312.514429][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 312.541517][ T4391] usb 1-1: Using ep0 maxpacket: 32 [ 312.544920][ T4391] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 312.546225][ T4391] usb 1-1: config 0 has no interface number 0 [ 312.547166][ T4391] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 312.551912][ T4391] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 312.554311][ T4391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.559903][ T4391] usb 1-1: Product: syz [ 312.560530][ T4391] usb 1-1: Manufacturer: syz [ 312.562114][ T4391] usb 1-1: SerialNumber: syz [ 312.569589][ T4391] usb 1-1: config 0 descriptor?? [ 312.570917][T10329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 313.234595][T10329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 313.255401][T10371] loop6: detected capacity change from 0 to 1024 [ 313.257510][T10371] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.259171][T10371] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 313.279515][T10371] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 313.299186][ T5861] EXT4-fs (loop6): unmounting filesystem. [ 313.442622][T10329] netlink: 'syz.0.1568': attribute type 10 has an invalid length. [ 313.448022][T10329] team0: Device ipvlan0 failed to register rx_handler [ 313.478137][ T4391] asix 1-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 313.479861][ T4391] asix: probe of 1-1:0.191 failed with error -32 [ 313.493462][ T4391] usb 1-1: USB disconnect, device number 19 [ 313.578017][T10390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.579404][T10390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.582474][T10392] loop7: detected capacity change from 0 to 256 [ 313.674247][T10392] FAT-fs (loop7): Directory bread(block 64) failed [ 313.675385][T10392] FAT-fs (loop7): Directory bread(block 65) failed [ 313.676414][T10392] FAT-fs (loop7): Directory bread(block 66) failed [ 313.677410][T10392] FAT-fs (loop7): Directory bread(block 67) failed [ 313.678384][T10392] FAT-fs (loop7): Directory bread(block 68) failed [ 313.679358][T10392] FAT-fs (loop7): Directory bread(block 69) failed [ 313.680496][T10392] FAT-fs (loop7): Directory bread(block 70) failed [ 313.691794][T10392] FAT-fs (loop7): Directory bread(block 71) failed [ 313.692825][T10392] FAT-fs (loop7): Directory bread(block 72) failed [ 313.693878][T10392] FAT-fs (loop7): Directory bread(block 73) failed [ 313.748074][T10395] binder: BINDER_SET_CONTEXT_MGR already set [ 313.749137][T10395] binder: 10387:10395 ioctl 4018620d 20000180 returned -16 [ 313.998935][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.000551][T10392] FAT-fs (loop7): Filesystem has been set read-only [ 314.003892][T10392] syz.7.1589: attempt to access beyond end of device [ 314.003892][T10392] loop7: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 314.006265][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.007685][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.011195][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.016977][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.018405][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.019729][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.021261][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.023067][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.024467][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.025953][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.027422][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.028836][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.030126][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.032471][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.034092][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.035569][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.036950][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.038417][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.039804][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.041128][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.042961][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.044373][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.045833][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.047381][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.048751][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.050142][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.051649][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.053283][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.054683][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.056195][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.057780][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.059156][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.060384][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.061987][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.063517][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.064971][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.066341][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.067736][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.069104][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.070571][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.072156][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.074017][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.075425][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.076919][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.078339][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.079777][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.081174][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.083241][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.084829][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.086254][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.087774][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.089277][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.091039][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.092978][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.094542][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.096161][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.097519][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.099030][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.100434][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.102113][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.103482][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.104776][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.106080][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.107611][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.108965][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.110378][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.112148][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.113538][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.114826][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.116086][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.117575][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.118964][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.120311][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.122803][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.124312][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.125795][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.127190][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.128603][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.129876][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.131214][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.134130][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.135610][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.137028][T10392] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 314.138413][T10392] syz.7.1589: attempt to access beyond end of device [ 314.138413][T10392] loop7: rw=0, sector=1744, nr_sectors = 8 limit=256 [ 314.140515][T10392] syz.7.1589: attempt to access beyond end of device [ 314.140515][T10392] loop7: rw=0, sector=1744, nr_sectors = 8 limit=256 [ 314.358990][T10406] loop7: detected capacity change from 0 to 1024 [ 314.370735][T10406] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.375163][T10406] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 314.392393][T10406] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 314.433205][ T7054] EXT4-fs (loop7): unmounting filesystem. [ 315.037693][T10437] loop6: detected capacity change from 0 to 256 [ 315.060435][T10437] FAT-fs (loop6): Directory bread(block 64) failed [ 315.061981][T10437] FAT-fs (loop6): Directory bread(block 65) failed [ 315.063127][T10437] FAT-fs (loop6): Directory bread(block 66) failed [ 315.064578][T10437] FAT-fs (loop6): Directory bread(block 67) failed [ 315.065948][T10437] FAT-fs (loop6): Directory bread(block 68) failed [ 315.067044][T10437] FAT-fs (loop6): Directory bread(block 69) failed [ 315.068077][T10437] FAT-fs (loop6): Directory bread(block 70) failed [ 315.069192][T10437] FAT-fs (loop6): Directory bread(block 71) failed [ 315.070373][T10437] FAT-fs (loop6): Directory bread(block 72) failed [ 315.078823][T10437] FAT-fs (loop6): Directory bread(block 73) failed [ 315.129208][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.136334][T10437] FAT-fs (loop6): Filesystem has been set read-only [ 315.137562][T10437] syz.6.1604: attempt to access beyond end of device [ 315.137562][T10437] loop6: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 315.144215][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.145762][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.150775][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.155275][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.156812][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.158968][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.164621][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.166004][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.167320][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.168644][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.169921][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.171203][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.175283][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.176662][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.177873][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.179136][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.180469][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.182020][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.183192][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.184467][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.185782][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.187075][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.188362][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.189640][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.191005][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.194596][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.195878][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.197199][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.198466][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.199918][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.201234][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.202547][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.203788][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.205009][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.206275][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.207447][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.208736][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.209938][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.211239][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.212708][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.214573][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.220699][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.237421][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.243431][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.245490][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.250590][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.252616][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.261172][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.267247][T10441] binder: BINDER_SET_CONTEXT_MGR already set [ 315.268209][T10441] binder: 10438:10441 ioctl 4018620d 20000180 returned -16 [ 315.541042][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.544428][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.549131][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.553699][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.558373][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.563024][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.566660][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.571165][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.576750][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.611536][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.613190][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.614700][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.616137][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.617642][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.622363][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.637023][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.638603][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.650226][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.652123][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.653495][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.654857][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.656214][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.657493][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.658828][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.663906][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.666112][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.667874][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.669605][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.671076][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.672911][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.674276][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.675755][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.677089][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.678376][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.679666][T10437] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 315.681220][T10437] syz.6.1604: attempt to access beyond end of device [ 315.681220][T10437] loop6: rw=0, sector=1744, nr_sectors = 8 limit=256 [ 315.683751][T10437] syz.6.1604: attempt to access beyond end of device [ 315.683751][T10437] loop6: rw=0, sector=1744, nr_sectors = 8 limit=256 [ 316.521140][T10472] netlink: 'syz.0.1613': attribute type 39 has an invalid length. [ 317.092380][T10488] loop7: detected capacity change from 0 to 256 [ 317.215282][T10492] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 198) [ 317.216778][T10492] FAT-fs (loop7): Filesystem has been set read-only [ 317.284692][T10493] binder: BINDER_SET_CONTEXT_MGR already set [ 317.285760][T10493] binder: 10489:10493 ioctl 4018620d 20000180 returned -16 [ 317.540686][T10497] device syzkaller0 entered promiscuous mode [ 318.595031][T10512] netlink: 'syz.6.1625': attribute type 39 has an invalid length. [ 318.715436][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.716929][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.800029][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1631'. [ 318.880633][T10532] loop7: detected capacity change from 0 to 512 [ 318.886467][T10532] EXT4-fs: Ignoring removed nobh option [ 318.924203][T10532] ------------[ cut here ]------------ [ 318.925314][T10532] EA inode 11 i_nlink=1026 [ 318.926042][T10532] WARNING: CPU: 1 PID: 10532 at fs/ext4/xattr.c:1005 ext4_xattr_inode_update_ref+0x454/0x498 [ 318.928421][T10532] Modules linked in: [ 318.929050][T10532] CPU: 1 PID: 10532 Comm: syz.7.1633 Not tainted syzkaller #0 [ 318.930219][T10532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 318.931697][T10532] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 318.932830][T10532] pc : ext4_xattr_inode_update_ref+0x454/0x498 [ 318.933749][T10532] lr : ext4_xattr_inode_update_ref+0x454/0x498 [ 318.934702][T10532] sp : ffff8000211f6dc0 [ 318.935317][T10532] x29: ffff8000211f6e70 x28: 0000000000000000 x27: dfff800000000000 [ 318.936511][T10532] x26: ffff8000211f6de0 x25: ffff70000423edbc x24: 0000000000000000 [ 318.937816][T10532] x23: ffff800017bc9000 x22: ffff000103c55330 x21: 0000000000000402 [ 318.939021][T10532] x20: 0000000000000001 x19: ffff000103c552f0 x18: ffff800011b7bf60 [ 318.940287][T10532] x17: 1fffe00033eaed7e x16: ffff8000082d9364 x15: 0000000040000000 [ 318.941581][T10532] x14: 0000000000000001 x13: 1fffe00033eb1430 x12: 0000000000ff0100 [ 318.942886][T10532] x11: ff0080000a8d8624 x10: 0000000000000003 x9 : a4fe69525dd6e900 [ 318.944131][T10532] x8 : a4fe69525dd6e900 x7 : ffff80000825796c x6 : 0000000000000000 [ 318.945199][T10532] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 318.946405][T10532] x2 : 0000000000000006 x1 : ffff800011b7da80 x0 : ffff80018a421000 [ 318.947556][T10532] Call trace: [ 318.948079][T10532] ext4_xattr_inode_update_ref+0x454/0x498 [ 318.948955][T10532] ext4_xattr_set_entry+0x918/0x15a0 [ 318.949769][T10532] ext4_xattr_ibody_set+0x204/0x5f8 [ 318.950571][T10532] ext4_expand_extra_isize_ea+0xea4/0x17ac [ 318.951419][T10532] __ext4_expand_extra_isize+0x298/0x358 [ 318.952276][T10532] __ext4_mark_inode_dirty+0x3e4/0x784 [ 318.953061][T10532] ext4_evict_inode+0xb64/0x1278 [ 318.953751][T10532] evict+0x3e0/0x828 [ 318.954288][T10532] iput+0x754/0x7e4 [ 318.954816][T10532] ext4_process_orphan+0x240/0x2b4 [ 318.955541][T10532] ext4_orphan_cleanup+0x920/0x1060 [ 318.956318][T10532] ext4_fill_super+0x6188/0x660c [ 318.957040][T10532] get_tree_bdev+0x358/0x544 [ 318.957726][T10532] ext4_get_tree+0x28/0x38 [ 318.958349][T10532] vfs_get_tree+0x90/0x274 [ 318.959048][T10532] do_new_mount+0x228/0x810 [ 318.959805][T10532] path_mount+0x5bc/0xe80 [ 318.960449][T10532] __arm64_sys_mount+0x49c/0x59c [ 318.961111][T10532] invoke_syscall+0x98/0x2b4 [ 318.961800][T10532] el0_svc_common+0x138/0x258 [ 318.962486][T10532] do_el0_svc+0x58/0x130 [ 318.963091][T10532] el0_svc+0x58/0x128 [ 318.963716][T10532] el0t_64_sync_handler+0x84/0xf0 [ 318.964516][T10532] el0t_64_sync+0x18c/0x190 [ 318.965193][T10532] irq event stamp: 3346 [ 318.965822][T10532] hardirqs last enabled at (3345): [] finish_lock_switch+0xb0/0x1c4 [ 318.967204][T10532] hardirqs last disabled at (3346): [] el1_dbg+0x24/0x80 [ 318.968397][T10532] softirqs last enabled at (2134): [] local_bh_enable+0x10/0x34 [ 318.969755][T10532] softirqs last disabled at (2132): [] local_bh_disable+0x10/0x34 [ 318.971147][T10532] ---[ end trace 0000000000000000 ]--- [ 318.972012][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.995316][T10532] EXT4-fs (loop7): 1 orphan inode deleted [ 318.998635][T10532] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 319.080590][ T7054] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 319.088078][ T7054] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 319.094941][ T7054] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 319.493966][ T7054] EXT4-fs (loop7): unmounting filesystem. [ 319.785238][ T4536] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.903525][ T4536] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.995291][ T4536] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.082877][ T4536] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.381769][ T4536] tipc: Left network mode [ 322.446179][ T4536] device hsr_slave_0 left promiscuous mode [ 322.481802][ T4536] device hsr_slave_1 left promiscuous mode [ 322.541513][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.542614][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.544187][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.545355][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.546828][ T4536] device bridge_slave_1 left promiscuous mode [ 322.547831][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.582081][ T4536] device bridge_slave_0 left promiscuous mode [ 322.583878][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.701562][ T4536] device veth1_macvtap left promiscuous mode [ 322.702621][ T4536] device veth0_macvtap left promiscuous mode [ 322.703600][ T4536] device veth1_vlan left promiscuous mode [ 322.704473][ T4536] device veth0_vlan left promiscuous mode [ 324.964530][ T4536] team0 (unregistering): Port device team_slave_1 removed [ 325.162637][ T4536] team0 (unregistering): Port device team_slave_0 removed [ 325.332174][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.562473][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.143044][ T4536] bond0 (unregistering): Released all slaves